Download

Skill UI

Browse and discover 12179+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search USP , found 104 results

Default Newest Most Downloaded

Hunting for Account Manipulation Techniques

hunting-for-t1098-account-manipulation

mukul975/Anthropic-Cybersecurity-Skills

This skill guides threat hunters in detecting MITRE ATT&CK T1098 account manipulation techniques. It focuses on analyzing Windows Security Event Logs (like 4738, 4728) to uncover shadow administration creation, suspicious group membership changes, SID history injection, and unauthorized credential modifications, crucial for incident response and building robust detection rules.

Detect Suspicious Windows Service Installations

hunting-for-unusual-service-installations

mukul975/Anthropic-Cybersecurity-Skills

A specialized threat hunting skill that analyzes System event logs (Event ID 7045) to detect suspicious Windows service installations. It parses service binary paths, identifies indicators of persistence mechanisms, and maps findings to MITRE ATT&CK techniques (T1543.003), helping security analysts uncover covert persistence methods.

Hunting For Webshell Activity Detection

hunting-for-webshell-activity

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide and methodology for proactively detecting webshell deployments on internet-facing servers. It focuses on analyzing file system anomalies, suspicious process spawning from web applications, and identifying unusual HTTP traffic patterns. Ideal for security operations centers (SOCs) during threat hunting, incident response, and purple team exercises.

Webshell Hunting Agent

hunting-for-webshells-in-web-servers

mukul975/Anthropic-Cybersecurity-Skills

Scans web server roots for high-entropy files, suspicious PHP/JSP/ASP payloads, and recent modifications to flag obfuscated webshells via entropy thresholds, regex signatures, and file metadata.

CloudTrail Log Analysis for AWS Security

implementing-cloud-trail-log-analysis

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide on implementing AWS CloudTrail log analysis for robust security monitoring, threat detection, and forensic investigation. Learn how to configure CloudTrail, use Amazon Athena for SQL querying, and leverage CloudWatch Logs Insights and SIEM integration to identify unauthorized access, privilege escalation, and suspicious API activity across AWS services.

Implementing Cloud Workload Protection

implementing-cloud-workload-protection

mukul975/Anthropic-Cybersecurity-Skills

This utility implements comprehensive Cloud Workload Protection (CWPP) by monitoring compute workloads on cloud instances (EC2/GCE). It provides runtime security controls, detecting process anomalies, unauthorized binary execution, cryptomining activity, and suspicious network connections using AWS and Google APIs. Ideal for establishing robust security postures and meeting compliance requirements.

Implementing Email Sandboxing with Proofpoint

implementing-email-sandboxing-with-proofpoint

mukul975/Anthropic-Cybersecurity-Skills

This skill guides the implementation of email sandboxing using Proofpoint Targeted Attack Protection (TAP). It covers configuring isolated detonations for suspicious attachments and URLs to detect zero-day malware, evasive phishing, and advanced threats. Learn to tune policies, monitor the TAP dashboard, and integrate findings with SIEM for robust email security architecture.

Integrating Fuzz Testing in CI/CD with AFL++

implementing-fuzz-testing-in-cicd-with-aflplusplus

mukul975/Anthropic-Cybersecurity-Skills

Learn how to integrate AFL++ (American Fuzzy Lop Plus Plus) into Continuous Integration/Continuous Deployment (CI/CD) pipelines. This guide details the process of using coverage-guided fuzzing to discover critical vulnerabilities, such as memory corruption, input handling flaws, and logic bugs, in compiled C/C++ applications that process untrusted input.

Osquery Endpoint Monitoring Setup

implementing-osquery-for-endpoint-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Automate the deployment of osquery scheduled queries to continuously monitor endpoints, covering process inventory, network listeners, file integrity, and persistence mechanisms; generate osquery.conf, configure differential logging, analyze suspicious results, and produce a security report.

Runtime Security with eBPF and Tetragon

implementing-runtime-security-with-tetragon

mukul975/Anthropic-Cybersecurity-Skills

Tetragon, a CNCF project under Cilium, provides advanced, kernel-level runtime security observability and policy enforcement in Kubernetes clusters. By utilizing eBPF, it monitors process execution, file access, and network connections with minimal overhead, enabling detection and prevention of container escapes, unauthorized access, and suspicious activity.

Investigating Insider Threat Indicators

investigating-insider-threat-indicators

mukul975/Anthropic-Cybersecurity-Skills

This skill provides SOC teams with a structured, multi-source workflow to investigate potential insider threats. It correlates data from SIEM, DLP, EDR, and HR feeds to detect data exfiltration attempts (via cloud, USB, email), unauthorized access patterns, and policy violations. It is crucial for building comprehensive investigation timelines, especially when handling departing employees or suspected data theft.

AWS CloudTrail Forensic Investigation

performing-cloud-forensics-with-aws-cloudtrail

mukul975/Anthropic-Cybersecurity-Skills

This tool provides a comprehensive workflow for performing deep forensic investigations on AWS environments. By leveraging CloudTrail logs and programmatic access via boto3/Athena, users can reconstruct attacker activity, identify compromised credentials, analyze suspicious API call patterns, and generate detailed incident response reports.

Prev 1 2 3 4 567 8 9 Next

Language